Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143291.roa
File: AS143291.roa (raw, json)
Hash identifier: +7brfKnMsBUd+DbeOKp6NLhD8hIPp/5H/zEtCxRfVvw=
Subject key identifier: 6E:D0:37:93:E1:DC:DD:80:C0:06:0C:79:57:24:BC:98:B2:31:89:EA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5294D5515C67327F00D46137905CCB3001492D50
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143291.roa
Signing time: Tue 26 May 2026 08:52:51 +0000
ROA not before: Tue 26 May 2026 08:47:51 +0000
ROA not after: Tue 25 May 2027 08:52:51 +0000
asID: 143291
IP address blocks: 240a:a281::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:94:d5:51:5c:67:32:7f:00:d4:61:37:90:5c:cb:30:01:49:2d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:51 2026 GMT
Not After : May 25 08:52:51 2027 GMT
Subject: CN=6ED03793E1DCDD80C0060C795724BC98B23189EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:05:8c:9d:5b:7f:28:34:ee:b7:52:a9:fe:12:
33:3e:f2:fa:9f:dc:9a:38:eb:1a:7f:ba:85:13:5f:
d8:06:e5:85:e9:c6:d7:f2:57:a6:ed:38:01:a4:ff:
ea:b7:c4:e3:e9:33:67:51:98:04:92:9f:6b:3e:1e:
ec:b3:78:fe:55:b6:22:dc:1d:47:61:b4:df:2e:4a:
ec:61:8e:b9:29:6e:6d:f4:48:db:f9:1e:b3:e9:33:
53:00:db:ed:1e:61:76:1b:d0:47:af:55:da:51:71:
bf:65:2a:24:ba:d4:61:79:ea:fe:aa:47:88:b5:8d:
b7:90:20:5e:58:3f:4f:2e:e2:4c:01:75:b2:81:34:
1d:1d:db:05:41:1a:62:8c:6a:4c:e2:d0:89:aa:a4:
76:38:c8:4c:91:47:14:ad:d6:fb:71:25:fb:09:b4:
55:f5:f4:df:e8:9a:82:ae:5e:5c:d2:59:f4:62:97:
9b:5f:7d:06:97:ec:1a:7c:ed:6b:16:08:84:76:0e:
c0:3b:be:8d:a8:53:99:d9:1f:cb:ba:c7:98:a3:f3:
af:b0:6e:ab:70:d0:41:9f:42:33:a6:0d:6c:63:6f:
51:e5:60:21:d0:85:6b:50:96:8c:17:e5:69:a3:e8:
5f:c2:07:51:55:2b:0b:a9:1f:c4:45:fe:d1:42:b1:
19:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D0:37:93:E1:DC:DD:80:C0:06:0C:79:57:24:BC:98:B2:31:89:EA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143291.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a281::/32
Signature Algorithm: sha256WithRSAEncryption
bc:cf:1e:68:87:6f:22:b1:84:1e:63:c7:66:f4:a4:6f:cc:83:
0d:9b:05:22:38:d1:e6:22:83:f9:9f:30:c2:1b:dc:7f:9c:6a:
1b:d8:9a:f5:20:0d:50:1f:b6:88:2d:c6:7f:57:e7:a8:10:5a:
60:85:fb:40:a9:ca:80:57:a0:95:79:8c:fd:87:8a:cc:92:1d:
bd:0d:3a:d1:ad:c3:3d:cf:ee:8e:b3:c1:b9:ec:51:12:4e:78:
f8:4a:a0:7d:12:c4:ac:ff:5a:3a:4a:f5:0e:dc:be:db:3e:07:
e9:43:fd:95:a1:4a:b7:0e:46:f1:6f:15:86:65:66:88:53:74:
5a:58:ed:03:62:02:88:b5:be:49:5c:d2:5b:c2:5c:55:ec:d9:
2f:91:fc:b3:e5:ea:f8:f4:47:1e:9b:3a:36:2b:a1:1f:3f:52:
e7:46:b5:18:41:aa:77:3d:c7:92:d5:27:a2:ca:5e:fd:6d:cc:
93:64:dd:83:d2:77:9f:a0:35:f8:aa:c7:79:92:8e:88:8e:83:
60:c8:89:63:9e:49:21:66:c9:89:8f:37:c1:df:e5:2c:c9:08:
ff:6b:e8:06:56:60:7c:a1:e5:b0:3a:55:71:d8:2f:e4:aa:b0:
e9:d9:42:32:84:8f:73:1f:bc:ca:f9:bb:d2:08:e3:f7:ee:a0:
b8:aa:e3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:09 2026 by rpki-client